This question already has an answer here:
I have recently been working on an internal website at my current company. I am using Ajax and PHP to check that the username and password entered in the login fields match what is stored in the database.
The Ajax script is storing the username and password as a variable then passing it to PHP which hashes the password as SHA512, before searching the users table in the database. However the password being sent from Ajax to PHP is therefore plaintext.
As this is an internal site only accessible by those on the domain, and isn't storing any sensitive information I am not worried about using an SSL certificate for additional security.
I have been wondering though what methods are used to intercept passwords, where would someone look? Would they need access to the server logs, could they find the password simply through their browser?